Posts tagged Vulnerability Disclosure

Threat Research
CVE-2021-3198 and CVE-2021-3540: MobileIron Shell Escape Privilege Escalation Vulnerabilities
Tod Beardsley

Detection and Response
Patch Tuesday Dashboard Template Release
Dane Grace

Threat Research
CVE-2021-26908 and CVE-2021-26909: Automox Agent Information Disclosure (FIXED)
Tod Beardsley

Exposure Management
CVE-2021-22652: Advantech iView Missing Authentication RCE (FIXED)
Tod Beardsley

Vulnerabilities and Exploits
CVE-2020-7378: OpenCRX Unverified Password Change (FIXED)
Tod Beardsley

Exposure Management
Vulntober: Multiple Mobile Browser Address Bar Spoofing Vulnerabilities
Tod Beardsley

Vulnerabilities and Exploits
CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed
boB Rudis

Vulnerabilities and Exploits
May 2020 Cisco Remote Vulnerabilities Guidance
boB Rudis

Exposure Management
Dispelling Zoom Bugbears: What You Need to Know About the Latest Zoom Vulnerabilities
Tod Beardsley

Vulnerabilities and Exploits
R7-2019-39 | CVE-2019-5648: LDAP Credential Exposure in Barracuda Load Balancer ADC (FIXED)
Sam Huckins

Vulnerabilities and Exploits
R7-2019-40: Bloomsky SKY2 Weather Camera Station Data Authenticity and Exposure Vulnerabilities
Tod Beardsley

Vulnerabilities and Exploits
IoT Vuln Disclosure: Children's GPS Smart Watches (R7-2019-57)
Tod Beardsley

Threat Research
R7-2019-32: Denial-of-Service Vulnerabilities in Beckhoff TwinCAT PLC Environment
Tod Beardsley

Vulnerabilities and Exploits
R7-2019-09 | CVE-2019-5617, CVE-2019-5643, CVE-2019-5644: C4G BLIS authentication and authorization vulnerabilities (FIXED)
Sam Huckins

Vulnerabilities and Exploits
August 2019 Microsoft Remote Desktop Services (RDP) Patches: What You Need to Know
boB Rudis

Vulnerabilities and Exploits
Zoom Video Snooping Security Flaw (CVE-2019-13450): What You Need to Know
Tod Beardsley

Exposure Management
Microsoft Windows RDP Network Level Authentication Bypass (CVE-2019-9510)
boB Rudis

Detection and Response
Investigating the Plumbing of the IoT Ecosystem (R7-2018-65, R7-2019-07) (FIXED)
Tod Beardsley

Vulnerabilities and Exploits
R7-2018-43: Username Enumeration in Okta SSO Del Auth through Response Timing
Tod Beardsley

Vulnerabilities and Exploits
R7-2019-01: CircuitWerkes Sicon-8 Client-Side Authentication Read-Only Bypass (CVE-2019-5616)
Tod Beardsley

Threat Research
Understanding Ubiquiti Discovery Service Exposures
Jon Hart